Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          0p4t3C7/dkoDSpFrEUhREemacAHyNuz/GdQVY72eQoI=
Subject key identifier:   51:19:9B:FB:A1:A5:32:36:EC:FB:69:93:79:02:AF:99:B3:D2:87:9D
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       019CAAC6F48CFC54263D9005F87CCBDB47F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0858
Signing time:             Sun 01 Mar 2026 19:01:31 +0000
Manifest this update:     Sun 01 Mar 2026 19:01:31 +0000
Manifest next update:     Mon 02 Mar 2026 19:01:31 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: z9/5IOSm1eWMICg/Kd0kCU03VV4CKfmxHouijxpByn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 15:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:aa:c6:f4:8c:fc:54:26:3d:90:05:f8:7c:cb:db:47:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Mar  1 19:01:31 2026 GMT
            Not After : Mar  2 19:01:31 2026 GMT
        Subject: CN=51199bfba1a53236ecfb69937902af99b3d2879d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:19:f5:9b:fa:7d:6e:6c:4b:95:c7:3d:d2:54:
                    69:30:d9:e5:9d:9d:a9:bd:25:16:0f:50:cb:e6:d9:
                    4e:23:3e:c2:95:5f:38:f4:a6:7f:12:5c:0c:b5:21:
                    9e:92:e4:1b:d6:e4:c4:6d:29:92:d0:9e:5b:f2:af:
                    16:5b:65:8e:02:b4:11:bb:37:5e:08:bd:3b:62:2a:
                    6d:98:bb:3d:33:0a:19:0f:1b:2a:85:94:aa:47:8b:
                    82:26:29:9d:75:14:f3:a3:f7:d7:92:dc:61:23:41:
                    7d:44:16:73:ed:cf:8c:93:df:15:ec:d0:42:ab:b3:
                    a4:f7:7d:07:0b:05:69:f8:3d:f0:12:66:22:b4:3e:
                    0c:01:16:bf:a6:c5:7f:e3:af:be:7f:9c:dd:7a:fe:
                    44:15:98:2a:49:46:96:6b:c7:1d:48:68:7f:91:30:
                    43:71:c0:ea:c8:ff:55:8a:e4:32:cf:5d:7f:22:e6:
                    4c:58:fe:f2:28:99:4a:cf:a1:f7:e4:47:2a:7b:96:
                    46:3c:9f:96:94:0c:ab:a4:bb:19:23:8c:af:c8:3e:
                    a2:ed:e8:b1:2d:83:33:ce:8b:8f:2b:ca:ce:b2:69:
                    1d:d7:71:36:06:71:ac:85:5a:ea:33:7d:f1:18:8e:
                    07:1d:ee:89:5e:1a:b7:ee:5b:3b:51:36:c0:b9:ea:
                    6d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:19:9B:FB:A1:A5:32:36:EC:FB:69:93:79:02:AF:99:B3:D2:87:9D
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:2b:66:ee:59:63:45:3c:25:eb:2b:74:90:aa:d8:57:89:
         ee:4b:1c:0b:61:45:d7:db:75:93:bf:82:10:8c:c5:83:7f:2e:
         1a:c3:a8:92:86:e8:4e:3f:ef:0c:0b:e6:2e:30:b1:45:62:c4:
         7c:0a:0b:e3:64:ae:0b:49:54:61:ab:fc:4b:b5:31:e2:9e:b6:
         5d:1a:6a:be:95:cd:68:b1:84:92:4e:09:7a:1e:8e:37:df:e0:
         7a:3c:40:09:f6:c4:95:97:82:3d:4f:83:25:fe:d9:da:61:6c:
         0c:66:ea:cc:67:c9:dd:2c:04:3b:6d:c5:4e:9e:2f:07:ce:28:
         bb:49:e6:57:24:4e:96:c1:98:93:33:d1:c4:d0:a9:6d:e7:62:
         99:02:97:b5:90:ab:c4:c0:dd:94:a6:dc:60:d4:7e:b6:23:99:
         9e:4a:6f:95:fd:30:e9:3e:96:0d:75:04:31:ae:10:ea:80:2b:
         37:17:2e:0f:26:4b:db:c3:92:5b:ca:50:75:3c:15:bb:6b:69:
         d1:97:7a:92:b3:31:79:ea:cd:ee:f2:4f:89:fe:71:73:10:81:
         3e:49:4b:7d:e0:86:14:23:75:bb:d5:c9:17:ae:81:f2:9f:f1:
         be:b6:8e:4f:92:72:5d:6e:c4:f9:72:29:ec:1f:06:09:2d:82:
         7b:63:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:29:44 2026 by rpki-client